Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D773998DDBA3C5C2FE27602F55008C73BE89A3AE.cer
File:                     D773998DDBA3C5C2FE27602F55008C73BE89A3AE.cer (raw, json)
Hash identifier:          tD+7EnmSrT/ahv+MHAKeNzmXYKTjix1sco8LVAyjOZU=
Subject key identifier:   D7:73:99:8D:DB:A3:C5:C2:FE:27:60:2F:55:00:8C:73:BE:89:A3:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30BE70033F60D3994668EAC3049072B38271FF4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/D773998DDBA3C5C2FE27602F55008C73BE89A3AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Oct 2023 02:02:39 +0000
Certificate not after:    Wed 02 Oct 2024 02:07:39 +0000
Subordinate resources:    AS: 61684
                          IP: 131.108.188.0/22
                          IP: 168.228.100.0/22
                          IP: 2804:1cf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:be:70:03:3f:60:d3:99:46:68:ea:c3:04:90:72:b3:82:71:ff:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  4 02:02:39 2023 GMT
            Not After : Oct  2 02:07:39 2024 GMT
        Subject: CN=D773998DDBA3C5C2FE27602F55008C73BE89A3AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:79:f9:53:fa:fd:4d:3a:02:50:e6:43:91:fe:
                    e0:e4:b2:9f:99:1e:7f:91:cd:19:78:35:68:b9:f2:
                    17:17:53:71:4d:9d:ea:de:be:bd:2b:65:9e:95:e7:
                    7a:68:14:4d:59:1e:a8:f4:f5:68:a6:04:ca:85:0c:
                    03:ef:29:e5:71:f5:1e:99:19:99:d3:42:50:63:23:
                    1c:9e:e3:ea:a6:65:94:76:a1:47:0b:eb:16:12:80:
                    28:a5:10:5a:dc:f5:96:6d:b3:3a:0b:58:00:3e:ff:
                    2c:ad:08:15:c8:ce:b1:8f:e6:cf:ac:54:bd:35:85:
                    b3:d5:f3:0c:a9:11:75:bb:20:72:27:fc:51:f1:e7:
                    88:76:70:06:4d:40:1b:35:43:53:48:da:8c:95:7d:
                    f7:9a:ed:7f:78:f5:fb:5c:12:ac:b0:4c:82:85:73:
                    af:56:53:bb:3c:3d:02:68:23:3a:3a:20:52:35:f1:
                    83:64:08:c0:72:72:34:a6:b4:8a:a1:44:05:e1:e8:
                    be:c4:1d:15:bb:71:04:5e:da:3f:ef:24:da:8e:3e:
                    63:6e:0c:f4:92:4c:79:4a:10:4e:47:e5:8a:97:13:
                    8c:d0:25:a0:46:c7:4e:b2:08:ca:98:5e:c6:66:93:
                    1c:4c:98:13:23:e8:72:a4:ef:6d:4a:8e:1d:37:ca:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:73:99:8D:DB:A3:C5:C2:FE:27:60:2F:55:00:8C:73:BE:89:A3:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/D773998DDBA3C5C2FE27602F55008C73BE89A3AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.188.0/22
                  168.228.100.0/22
                IPv6:
                  2804:1cf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61684

    Signature Algorithm: sha256WithRSAEncryption
         97:cc:fa:5c:ba:b0:df:82:4f:2c:37:b1:b1:d5:0c:a4:26:64:
         d8:1b:2f:b5:95:e0:c7:fe:d9:d5:df:1f:57:15:42:04:11:2e:
         48:a6:0d:c9:72:25:2a:fb:87:58:1f:fc:18:9a:65:3f:88:d4:
         37:47:ea:2a:5d:16:44:29:bb:d6:11:e9:29:5d:bd:49:7a:7c:
         1c:9b:2f:4a:0a:ae:95:26:2c:a9:a7:f2:2e:e4:9a:c2:33:95:
         5e:9f:45:13:83:fb:60:d4:be:4e:cd:c0:dc:17:c6:2f:a9:bd:
         df:ca:25:49:0f:7b:50:39:9a:18:78:d3:6c:86:e6:08:af:da:
         af:15:5a:de:51:ce:fb:4c:a2:09:23:2b:09:34:8a:65:ac:63:
         86:87:0e:de:c9:2b:b2:4c:0b:75:a0:da:71:6d:5b:71:b7:d2:
         f6:06:d8:55:ac:31:22:49:ab:86:61:2d:6c:d3:70:07:49:63:
         4a:2c:33:2f:bd:7f:cd:06:39:d9:0e:a0:33:97:33:dc:05:de:
         f2:c0:0c:6a:d7:55:93:15:f6:a2:23:79:f4:c0:f1:2b:e0:1a:
         01:12:8a:59:8b:8b:dd:22:6d:db:5e:b5:71:eb:3c:09:35:b5:
         30:58:2e:bf:46:67:db:26:7a:55:8a:9d:36:bc:f2:63:a6:75:
         f5:66:01:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org